All Apps and Add-ons

Exporting Data from Splunk into Excel

daniellim
Explorer

Hello Splunk Community, I have come across a task whereby I am required to export data from splunk into excel, through rest api etc.

The Splunk ODBC Driver is not supported on Splunk platform versions 7.x. Upgrading your Splunk platform to 7.x can cause breaking changes to the Splunk ODBC Driver.

As this option is not viable due to it being discontinued, I would like to find out other options besides using the ODBC driver.

After much searching, I think the closest solution is VBA.

So my question would be - Are there any simple templates or guides for VBA to do this?

I need to authenticate with splunk, pull data through rest, and lastly populate the excel cells.

Looking forward to suggestions. Thanks!

0 Karma

inventsekar
SplunkTrust
SplunkTrust

As said on the above answer, we can use outputcsv command to export the splunk events to a CSV file , then, which can be easily imported into excel.

Any splunk search results, report/alert/dashboard can be saved as CSV file, then imported to excel.

As you are a member here at splunk answers, just thought to update you that, you can upvote any answers/comments and if any answers resolved your query, please "accept that as the answer", so that question will move from unanswered queue to answered queue.

thanks and best regards,
Sekar

PS - If this or any post helped you in any way, pls consider upvoting, thanks for reading !
0 Karma

jgbricker
Contributor

Depending on your requirements this may not be an option but thoight I’d point out that there is an outputcsv command.

https://docs.splunk.com/Documentation/Splunk/latest/SearchReference/Outputcsv

0 Karma
Get Updates on the Splunk Community!

Enter the Agentic Era with Splunk AI Assistant for SPL 1.4

  🚀 Your data just got a serious AI upgrade — are you ready? Say hello to the Agentic Era with the ...

Stronger Security with Federated Search for S3, GCP SQL & Australian Threat ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

Accelerating Observability as Code with the Splunk AI Assistant

We’ve seen in previous posts what Observability as Code (OaC) is and how it’s now essential for managing ...